CVE-2012-5450

Cross-site request forgery CSRF vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple CMSMS 1.11.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary files via the deld parameter...

CVE-2012-5450: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple CMSMS 1.11.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary files via the deld parameter...

PT-2012-6252

Name of the Vulnerable Software and Affected Versions CMS Made Simple versions prior to 1.11.2.1 Description A directory traversal issue exists, allowing remote authenticated administrators to delete arbitrary files by utilizing a .. dot dot in the deld parameter. This can be exploited using CSRF...